Every time use permissive control in function memberof_mod.

Storing cyclic groups into sysdb can cause adding ghost members,
which has already been stored. Function ldb_modify will fail
with error [Attribute or value exists].

With permisive control, duplicated attributes will be skipped
as if it was never added.

https://fedorahosted.org/sssd/ticket/1846

1 files changed, 7 insertions, 0 deletions

diff --git a/src/ldb_modules/memberof.c b/src/ldb_modules/memberof.c
index 4a9328482..79b33137b 100644
--- a/src/ldb_modules/memberof.c
+++ b/src/ldb_modules/memberof.c
@@ -1135,6 +1135,13 @@ static int mbof_add_muop(struct mbof_add_ctx *add_ctx)
         return ret;
     }
 
+    ret = ldb_request_add_control(mod_req, LDB_CONTROL_PERMISSIVE_MODIFY_OID,
+                                  false, NULL);
+    if (ret != LDB_SUCCESS) {
+        talloc_free(mod_req);
+        return ret;
+    }
+
     return ldb_next_request(ctx->module, mod_req);
 }